MrFk's starred repositories
CVE-2022-22947_Rce_Exp
Spring Cloud Gateway 远程代码执行漏洞Exp Spring_Cloud_Gateway_RCE_Exp-CVE-2022-22947
CVE-2022-0847-DirtyPipe-Exploit
A root exploit for CVE-2022-0847 (Dirty Pipe)
CVE-2022-25636
CVE-2022-25636
SharpXDecrypt
Xshell全版本密码恢复工具
SysWhispers2
AV/EDR evasion via direct system calls.
KillDefender
A small POC to make defender useless by removing its token privileges and lowering the token integrity
CVE-2021-4034
CVE-2021-4034 Add Root User - Pkexec Local Privilege Escalation
pingcastle
PingCastle - Get Active Directory Security at 80% in 20% of the time
CVE-2021-44228-PoC-log4j-bypass-words
🐱💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks
log4j-scan
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
InfoSec-Black-Friday
All the deals for InfoSec related software/tools this Black Friday
fastjson-check
fastjson 被动扫描、不出网payload生成
CVE-2021-35215
SolarWinds Orion Platform ActionPluginBaseView 反序列化RCE
Needle_Sift_BOF
Strstr with user-supplied needle and filename as a BOF.
ptunnel-ng
Tunnel TCP connections through ICMP.
AzureAD-Attack-Defense
This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.
Vuln100Topics
知识星球《漏洞百出》最新 20条 Topic
RCE-0-day-for-GhostScript-9.50
RCE 0-day for GhostScript 9.50 - Payload generator
shiro_rce_tool
shiro 反序列 命令执行辅助检测工具
gadgetinspector
利用链、漏洞检测工具
SocksOverRDP
Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop